Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File: BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier: plutw8Bez+VbNw2BY6MfZOOZ3vYbzBqrkulNDRocu/c=
Subject key identifier: 43:55:5D:64:CD:F4:64:15:40:41:2E:7A:38:80:C8:70:3E:EC:81:E8
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 019E30E0089118171D813330AC56FA028A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number: 16AF
Signing time: Sat 16 May 2026 13:00:49 +0000
Manifest this update: Sat 16 May 2026 13:00:49 +0000
Manifest next update: Sun 17 May 2026 13:00:49 +0000
Files and hashes: 1: 1dYhzWKh39b-0GLPb-ct32MCxhk.roa (hash: HvZcxTszijTpa0P8i88U2ahY8WNXyPEFJPNOW2Ie54g=)
2: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: TQZtvZfae3pLqNGfqiZ1eYCRSq955mJ1G/8fmOrICbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:08:91:18:17:1d:81:33:30:ac:56:fa:02:8a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: May 16 13:00:49 2026 GMT
Not After : May 17 13:00:49 2026 GMT
Subject: CN=43555d64cdf4641540412e7a3880c8703eec81e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:7e:c1:f0:6e:2a:33:fc:49:3d:12:98:89:
3f:77:87:9b:f5:88:c4:f6:a5:ce:58:06:c1:a5:b4:
a2:51:49:66:d7:d5:4c:f3:01:8d:e7:93:a0:b6:58:
36:58:e9:08:61:f8:bc:4f:2a:b2:ef:34:ae:11:41:
44:10:6d:2c:38:1e:0d:b1:d3:d5:95:a2:67:fb:97:
99:82:12:b6:91:6b:38:fa:c0:90:1e:6f:90:1a:6d:
f0:62:44:83:ff:85:a0:3d:64:77:59:8b:de:e2:28:
0d:86:cf:32:1a:d0:91:b2:b0:81:d3:bc:52:b2:72:
10:3f:97:38:e9:c3:6d:4c:17:1e:1a:e6:6f:43:d3:
3f:e6:8d:1b:37:a0:4e:83:15:11:75:ad:be:48:b4:
5d:6f:6b:7a:69:7c:80:ae:a5:15:e4:ee:24:36:d7:
84:c5:e5:a6:60:cd:6b:d1:ff:04:cd:b1:ef:25:ee:
d9:30:82:47:66:25:51:05:c9:e4:f4:ff:13:f1:8e:
ff:77:b8:a2:95:48:22:50:7a:be:6d:61:40:7b:94:
67:66:9c:5f:cf:c1:ea:ed:3a:a5:29:6a:42:ff:58:
a9:26:82:8c:7a:ab:43:81:ad:cd:58:c2:0c:03:d3:
0b:13:11:17:e1:df:f3:24:f2:c8:10:ba:4a:36:76:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:5D:64:CD:F4:64:15:40:41:2E:7A:38:80:C8:70:3E:EC:81:E8
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:17:65:5d:e8:8f:9b:42:e5:80:77:a2:29:5d:04:b3:d5:f3:
7e:fe:fb:ea:c2:f9:90:25:19:bb:e0:84:b1:2e:d5:53:c8:65:
72:42:83:9d:70:97:54:be:4f:e1:d3:ea:ea:9a:05:cc:3e:33:
8d:ec:1f:df:0f:32:05:5b:12:10:af:c9:94:b3:bf:b9:2a:39:
4d:32:dc:9e:e1:1c:12:48:98:0f:2d:b9:cb:3b:9c:90:77:8f:
66:5c:c6:2a:ed:5a:94:49:f6:c6:4f:38:25:3d:35:8a:a9:58:
d2:5c:0e:51:06:ce:67:e9:aa:19:80:fb:ae:ac:5f:3a:0d:4b:
c8:8e:b1:37:50:9e:1a:6f:54:07:b3:b7:b1:0e:73:af:3c:a5:
3c:58:e5:a5:52:d9:18:91:bc:9c:92:58:02:59:92:8a:b8:48:
fd:80:f5:12:4b:b0:10:3f:ee:a3:34:04:ab:d2:5b:f8:d2:10:
17:ae:da:ca:2e:be:8d:7a:f6:9a:3c:55:c8:fd:f5:26:71:3c:
8f:72:fb:d2:47:66:cb:5e:00:7c:6b:25:66:d4:c6:f0:8a:01:
43:87:05:68:74:25:5b:ef:e8:3c:fd:02:c5:96:52:52:24:f5:
f6:81:df:92:f4:1f:26:7c:cf:86:e3:7d:59:c7:6e:f8:5a:ed:
fe:83:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:20 2026 by rpki-client